The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002448 advisory.

    The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly     consider which pages must be locked, which allows local users to cause a denial of service (system crash)     by triggering a memory-usage pattern that requires removal of page-table mappings.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3083 advisory.

    - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen)  [Orabug:
    19817787]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655}
    - ALSA: control: Fix replacing user controls (Lars-Peter Clausen)  [Orabug: 19817749]  {CVE-2014-4653}     {CVE-2014-4654} {CVE-2014-4655}
    - mm: try_to_unmap_cluster() should lock_page() before mlocking (Vlastimil Babka)  [Orabug: 19817324]     {CVE-2014-3122}
    - vm: convert fb_mmap to vm_iomap_memory() helper (Linus Torvalds)  [Orabug: 19816564]  {CVE-2013-2596}
    - vm: add vm_iomap_memory() helper function (Linus Torvalds)  [Orabug: 19816564]  {CVE-2013-2596}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leaks or privilege escalation :

  - CVE-2014-0196     Jiri Slaby discovered a race condition in the pty layer,     which could lead to denial of service or privilege     escalation.

  - CVE-2014-1737 / CVE-2014-1738     Matthew Daley discovered that missing input sanitising     in the FDRAWCMD ioctl and an information leak could     result in privilege escalation.

  - CVE-2014-2851     Incorrect reference counting in the ping_init_sock()     function allows denial of service or privilege     escalation.

  - CVE-2014-3122     Incorrect locking of memory can result in local denial     of service.

A flaw was discovered in the Linux kernel's pseudo tty (pty) device.
An unprivileged user could exploit this flaw to cause a denial of service (system crash) or potentially gain administrator privileges.
(CVE-2014-0196)

Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges.
(CVE-2014-3153)

Matthew Daley reported an information leak in the floppy disk driver of the Linux kernel. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from kernel memory.
(CVE-2014-1738)

Matthew Daley reported a flaw in the handling of ioctl commands by the floppy disk driver in the Linux kernel. An unprivileged local user could exploit this flaw to gain administrative privileges if the floppy disk module is loaded. (CVE-2014-1737)

A flaw was discovered in the handling of network packets when mergeable buffers are disabled for virtual machines in the Linux kernel. Guest OS users may exploit this flaw to cause a denial of service (host OS crash) or possibly gain privilege on the host OS.
(CVE-2014-0077)

An information leak was discovered in the netfilter subsystem of the Linux kernel. An attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-2568)

A flaw was discovered in the Linux kernel's ping sockets. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges via a crafted application. (CVE-2014-2851)

Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
287257	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002448)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	medium
78580	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2014-3083)	Nessus	Oracle Linux Local Security Checks	2014/10/20	2026/2/9	high
73971	Debian DSA-2926-1 : linux - security update	Nessus	Debian Local Security Checks	2014/5/13	2023/5/14	high
76295	Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2260-1)	Nessus	Ubuntu Local Security Checks	2014/6/28	2023/5/14	high

检测

插件搜索

medium

high

high

high